CVE-2016-4976

CWE-200 — Information Exposure4 documents4 sources
Severity
5.5MEDIUM
EPSS
0.1%
top 75.92%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apache Ambari
Timeline
PublishedMar 29
Latest updateMay 17

Description

Apache Ambari 2.x before 2.4.0 includes KDC administrator passwords on the kadmin command line, which allows local users to obtain sensitive information via a process listing.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶Mavenorg.apache.ambari:ambari2.0.0 — 2.4.0
▶NVDapache/ambari9 versions+8

🔴Vulnerability Details

3
GHSA
Apache Ambari reveals administrator passwords↗2022-05-17
▶
OSV
Apache Ambari reveals administrator passwords↗2022-05-17
▶
CVEList
CVE-2016-4976: Apache Ambari 2↗2017-03-29
▶